Exam 200-301 topic 1 question 293 discussion

Actual exam question from Cisco's 200-301

Question #: 293
Topic #: 1

Refer to the exhibit. An engineer must configure the interface that connects to PC1 and secure it in a way that only PC1 is allowed to use the port. No VLAN tagging can be used except for a voice VLAN. Which command sequence must be entered to configure the switch?

A. SW1(config-if)#switchport mode dynamic auto SW1(config-if)#switchport port-security SW1(config-if)#switchport port-security violation restrict
B. SW1(config-if)#switchport mode nonegotiate SW1(config-if)#switchport port-security SW1(config-if)#switchport port-security maximum 1
C. SW1(config-if)#switchport mode access SW1(config-if)#switchport port-security SW1(config-if)#switchport port-security mac-address 0050.7966.6800
D. SW1(config-if)#switchport mode dynamic desirable SW1(config-if)#switchport port-security mac-address 0050.7966.6800 SW1(config-if)#switchport port-security mac-address sticky

Show Suggested Answer

Suggested Answer: C 🗳️

by [deleted] at Sept. 27, 2022, 10:14 p.m.

Comments

Submit Cancel

[Removed]

Highly Voted 2 years, 7 months ago

Given answer is correct.

upvoted 8 times

...

robbydice

Highly Voted 2 years, 2 months ago

The key phrase is "in a way that only PC1 is allowed to use the port" that means no VLAN tagging, no trunking. Therefore in that case the best way to configure the port with access to PC1 is to configure it with command SW1# switchport mode access ....

upvoted 5 times

...

[Removed]

Most Recent 1 year, 2 months ago

Selected Answer: C

C is correct

upvoted 3 times

...

AbdullahMohammad251

1 year, 6 months ago

Selected Answer: C

The port must be configured as trunk or access; an interface in the default mode (dynamic auto) cannot be configured as a secure port. https://www.cisco.com/en/US/docs/switches/lan/catalyst3850/software/release/3.2_0_se/multibook/configuration_guide/b_consolidated_config_guide_3850_chapter_011111.html

upvoted 2 times

...

anchilinq

1 year, 8 months ago

why is b wrong?

upvoted 2 times

xtraMiles

10 months ago

Probably because the question specifically asked that only PC1 gets to use that port. Not that answer B couldn't serve the same purpose, but for the sake of specificity, go with C.

upvoted 1 times

...